From 718b6ee27a458235c57f8dacb5b7c23ad7b89a2d Mon Sep 17 00:00:00 2001 From: denis0001-dev Date: Wed, 19 Nov 2025 16:05:57 +0300 Subject: [PATCH] Remove file --- SECURITY_FOLLOWUPS.md | 9 --------- 1 file changed, 9 deletions(-) delete mode 100644 SECURITY_FOLLOWUPS.md diff --git a/SECURITY_FOLLOWUPS.md b/SECURITY_FOLLOWUPS.md deleted file mode 100644 index 659f5d1..0000000 --- a/SECURITY_FOLLOWUPS.md +++ /dev/null @@ -1,9 +0,0 @@ -# Security Follow-ups - -- Integrate log shipping/alerting (e.g. Loki or ELK) so events from `backend/logs/*.log` raise actionable notifications instead of remaining on disk. -- Add automated review of `security.log` for repeated `auth_bruteforce_detected` and burst messaging entries; trigger temporary IP bans or captcha challenges when thresholds are exceeded. -- Extend profanity filtering tests to cover dynamic blocklist updates and multi-language phrases; add regression suite to ensure adult-content words remain blocked. -- Implement DM spam heuristics similar to public chat (rate limiting, reaction abuse detection) and log attempts that target users who blocked the sender. -- Harden WebSocket session handling by recycling DB sessions per request or adopting async session factories to keep long-lived connections from retaining database handles indefinitely. -- Wire the new moderator blocklist endpoints into an authenticated UI workflow so operators can manage entries without shell access, and audit every change with responsible operator metadata. -